Runtime API framework for client-server communication

• US 9,467,446 B2
• Filed: 12/30/2015
• Issued: 10/11/2016
• Est. Priority Date: 06/14/2013
• Status: Active Grant

• Current Assignee: Dell Products LP (Dell Technologies Inc.)
• Original Assignee: Dell Products LP (Dell Technologies Inc.)
• Inventors: Fausak, Andrew T., Rombakh, Oleg
• Primary Examiner(s): Pwu, Jeffrey
• Assistant Examiner(s): CORUM JR, WILLIAM A
• Application Number:
  US14/985,054
• Publication Number:
  US 20160112420A1
• Time in Patent Office: 286 Days
• US Class Current: 1/1
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/029 Firewall traversal, e.g. tunnelling or, creating pinholes
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0807 using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213
• CPC Class Codes: H04L 63/0884 by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 67/08 specially adapted for terminal emulation, e.g. Telnet
• CPC Class Codes: H04L 67/1004 Server selection for load balancing
• CPC Class Codes: H04L 67/133 Protocols for remote procedure calls [RPC]
• CPC Class Codes: H04L 67/565 Conversion or adaptation of application format or content adding application control or application functional data H04L67/561

Abstract

In particular embodiments, a method includes receiving, by a computing device including an import/export framework, encoded client data. The client data may be encoded by a generic transcoding service. The method includes performing load-balancing based at least in part on the client data, authorizing the client'"'"'s access of a remote application, and exporting the encoded client data to the remote application.

Claims

1. A method comprising:

loading and executing a script with a client specification for creation of a tunnel;

receiving connection information for the tunnel, wherein the connection information comprises one or more credentials for the tunnel;

initiating a communication between the client and a proxy machine;

creating the tunnel between the proxy machine and a host;

creating an encrypted channel, by the proxy machine, within the tunnel;

providing to the client, by the proxy machine, remote access to the host through a firewall via a protocol of the tunnel;

transmitting, by the proxy machine, encoded client data via the tunnel to the client, wherein the client comprises an import/export framework, and wherein the client data is encoded by a generic transcoding service, wherein the generic transcoding service imports and exports a graphical device interface, a virtual channel, and an input/output device;

performing load balancing based at least in part on the client data, wherein the load balancing comprises tallying one or more connections;

authorizing the client'"'"'s access of a remote service;

attaching the client to the remote service by an export data stream via the import/export framework; and

exporting, by the export data stream, the encoded client data to the remote service via the tunnel.

2. The method of claim 1, wherein the import/export framework comprises a graphical device interface (GDI) and a virtual channel.

3. The method of claim 1, wherein the proxy machine resides within a router.

4. The method of claim 1, wherein authorizing the client'"'"'s access of the remote service is performed by the proxy machine by verifying one or more client credentials, and wherein the one or more client credentials comprise at least one of a username, a password, a domain name and a host name.

5. The method of claim 1, further comprising:

authenticating, by the proxy machine, the remote service, wherein authentication comprises verifying one or more service credentials, and wherein the one or more service credentials comprise at least one of a valid username of a user of the remote service, a valid password associated with the valid username, a domain name and a host name.

6. The method of claim 1, further comprising:

translating, by the proxy machine, one or more encoded messages from the remote service to the client.

7. The method of claim 6, wherein the proxy machine translates the one or more messages into a universal format.

8. The method of claim 1, wherein the generic transcoding service comprises at least one of hypertext markup language (HTML) syntax, an HTML-compatible stream service, and a 20 remote desktop client function.

9. One or more computer-readable non-transitory storage media embodying software that is operable when executed to:

load and execute a script with a client specification for creation of a tunnel;

receive connection information for the tunnel, wherein the connection information comprises one or more credentials for the tunnel;

initiate a communication between the client and a proxy machine;

create the tunnel between the proxy machine and a host;

create an encrypted channel, by the proxy machine, within the tunnel;

provide to the client, by the proxy machine, remote access to the host through a firewall via a protocol of the tunnel;

transmit, by the proxy machine, encoded client data via the tunnel to the client, wherein the client comprises an import/export framework, wherein the client data is encoded by a generic transcoding service, wherein the generic transcoding service imports and exports a graphical device interface, a virtual channel, and an input/output device;

perform load balancing based at least in part on the client data, wherein the load balancing comprises tallying one or more connections;

authorize the client'"'"'s access of a remote service;

attach the client to the remote service by an export data stream via the import/export framework; and

export, by the export data stream, the encoded client data to the remote service via the tunnel.

10. The media of claim 9, wherein the import/export framework comprises a graphical device interface (GDI) and a virtual channel.

11. The media of claim 9, wherein the proxy machine resides within a router.

12. The method of claim 9, wherein the authorization of the client'"'"'s access of the remote service is performed by the proxy machine by verifying one or more client credentials, and wherein the one or more client credentials comprise at least one of a username, a password, a domain 30 name and a host name.

13. The media of claim 9, wherein the software is further operable when executed to:

authenticate, by the proxy machine, the remote service, wherein authentication comprises verifying one or more service credentials, and wherein the one or more service credentials comprise at least one of a valid username of a user of the remote service, a valid password associated with the valid username, a domain name and a host name.

14. The media of claim 9, wherein the software is further operable when executed to:

translate, by the proxy machine, one or more encoded messages from the remote service to the client.

15. The media of claim 9, wherein the proxy machine translates the one or more messages into a universal format.

16. The media of claim 9, wherein the generic transcoding service comprises at least one of a hypertext markup language (HTML) syntax, an HTML-compatible stream service, and a remote desktop client function.

17. A system comprising:

a computing device comprising one or more processors and an import/export framework; and

a memory coupled to the processors comprising instructions executable by the processors, the processors operable when executing the instructions to;

load and execute a script with a client specification for creation of a tunnel;

receive connection information for the tunnel, wherein the connection information comprises one or more credentials for the tunnel;

initiate a communication between the client and a proxy machine;

create the tunnel between the proxy machine and a host;

create an encrypted channel, by the proxy machine, within the tunnel;

provide to the client, by the proxy machine, remote access to the host through a firewall via a protocol of the tunnel;

transmit, by the proxy machine, encoded client data via the tunnel to the client, wherein the client comprises an import/export framework, and wherein the client data is encoded by a generic transcoding service, wherein the generic transcoding service imports and exports a graphical device interface, a virtual channel, and an input/output device;

perform load balancing based at least in part on the client data, wherein the load balancing comprises tallying one or more connections;

authorize the client'"'"'s access of a remote service;

attach the client to the remote service by an export data stream via the import/export framework; and

export, by the export data stream, the encoded client data to the remote service via the tunnel.

18. The system of claim 17, wherein the processors are further operable when executing he instructions to:

authenticate, by the proxy machine, the remote service, wherein authentication comprises verifying one or more service credentials, and wherein the one or more service credentials comprise at least one of a valid username of a user of the remote service, a valid password associated with the valid username, a domain name and a host name; and

translate, by the proxy machine, one or more encoded messages from the remote service to the client.